A vulnerability has been discovered in Bubblewrap that would allow root privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/bubblewrap | * | < 0.11.2 | >= 0.11.2 |
Bubblewrap is an unprivileged sandboxing tool namespaces-powered chroot-like solution.
A vulnerability has been discovered in Bubblewrap. Please review the CVE identifier referenced below for details.
An attacker could achieve root privilege escalation if Bubblewrap is used in its suid mode.
There is no known workaround at this time.
All Bubblewrap users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/bubblewrap-0.11.2"
Bubblewrap misuses temporary directories allowing local code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/bubblewrap | * | < 0.4.1 | >= 0.4.1 |
Bubblewrap is an unprivileged sandboxing tool namespaces-powered chroot-like solution.
Bubblewrap misuses temporary directories in /tmp as a mount point.
This flaw may allow possible execution of code or prevention of running Bubblewrap.
There is no known workaround at this time.
All Bubblewrap users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/bubblewrap-0.4.1"